Don Armstrong

Name of the Vulnerable Software and Affected Versions: ldapscripts versions 1.4 through 1.7 Description: The issue allows local users to potentially read passwords by listing process arguments, as demonstrated by a call to ldappasswd in the ` changepassword` function. This could lead to a breach of confidentiality of protected information. The exploitation of this issue can be carried out by a local attacker. Recommendations: For ldapscripts versions 1.4 through 1.7, consider modifying the scripts to avoid passing passwords as command-line arguments to mitigate the risk of exploitation. As a temporary workaround, restrict access to process listings to minimize the risk of password exposure.